are there any differences other that with emergency key rollover, the key is marked as compromised? 1. make sure new KSK is published (in case of standby key, this step is skipped) 2. sign with new KSK 3. wait for ds-seen 4. complete rollover jakob